Skip to content

feat: exec output limits, maintain health check, store provenance#5

Merged
timorunge merged 2 commits into
mainfrom
feat/maintenance-and-exec-hardening
Jun 3, 2026
Merged

feat: exec output limits, maintain health check, store provenance#5
timorunge merged 2 commits into
mainfrom
feat/maintenance-and-exec-hardening

Conversation

@timorunge
Copy link
Copy Markdown
Owner

Summary

Combines the pending dependency bump with feature/hardening work so they share a single CI run. Supersedes #4 (the dependency updates are included here).

Dependencies

Features & hardening

  • exec sources: add max_output_bytes (default 10 MiB); stdout/stderr are streamed through bounded reads and the child process is killed on timeout — preventing unbounded memory use and orphaned sh processes.
  • lore maintain health: one-screen report covering config validity, compiled features, LLM client initialization, and store reachability.
  • Store provenance: stamp a chunk-config fingerprint + version into lore.meta; warn at ingest when an existing store was built with different settings.
  • Federated multi-store search: fan out across stores with BM25 score normalization and deterministic tie-breaks.
  • LLM credential warnings: surfaced through the ingest observer.

Tests & lints

  • Pure chunker boundary tests (empty doc, doc shorter than a chunk, min-chunk filtering, contiguous indices).
  • Enforce missing_errors_doc / missing_panics_doc; documented the public API surface.

Test plan

  • cargo fmt --check
  • cargo clippy --all-targets -- -D warnings (all-features, no-default-features, default)
  • cargo doc -D warnings
  • cargo test --all-features — 172 passing

Mirrors Dependabot PR #4 so the dependency bump and feature work share one CI run.
- exec: add `max_output_bytes` (default 10 MiB); stream stdout/stderr
  through bounded reads and kill the child process on timeout
- cli: `lore maintain health` reports config validity, compiled features,
  LLM client init, and store reachability
- store: stamp chunk-config fingerprint + version in lore.meta and warn
  at ingest when an existing store was built with different settings
- store: federated multi-store search with BM25 score normalization
- llm: surface missing-credential warnings via the ingest observer
- test: pure chunker boundary cases (empty, short, min-chunk, indices)
- chore(lints): enforce missing_errors_doc/missing_panics_doc and
  document the public API surface
@timorunge timorunge force-pushed the feat/maintenance-and-exec-hardening branch from 87732ba to 673cf7f Compare June 3, 2026 22:06
@timorunge timorunge merged commit 340e9b0 into main Jun 3, 2026
28 checks passed
@timorunge timorunge deleted the feat/maintenance-and-exec-hardening branch June 3, 2026 22:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant